This section describes our design for integrating the Flask security
mechanisms into the Linux networking component. It begins with a
discussion of the object classes and permissions defined for the
networking component. This is followed by a description of the
control requirements for the system calls used to manage and perform
network interprocess communication. Finally, the new socket system
calls defined for security-aware applications are described.